Remove 01
article thumbnail

CISA adds 41 flaws to its Known Exploited Vulnerabilities Catalog

Security Affairs

According to Binding Operational Directive (BOD) 22-01: Reducing the Significant Risk of Known Exploited Vulnerabilities , FCEB agencies have to address the identified vulnerabilities by the due date to protect their networks against attacks exploiting the flaws in the catalog.

IT 145
article thumbnail

CISA adds Apache Superset bug to its Known Exploited Vulnerabilities catalog

Security Affairs

According to Binding Operational Directive (BOD) 22-01: Reducing the Significant Risk of Known Exploited Vulnerabilities , FCEB agencies have to address the identified vulnerabilities by the due date to protect their networks against attacks exploiting the flaws in the catalog. Improper Access Control Vulnerability CVE-2023-23752.

IT 107
Insiders

Sign Up for our Newsletter

This site is protected by reCAPTCHA and the Google Privacy Policy and Terms of Service apply.

article thumbnail

EU launches bug bounty programs for 15 software

Security Affairs

The first phase of the FOSSA project started in 2014, the “pilot project” phase ran over two years from 2015-2016. The project was launched between 2015-2016 at the initiative of Julia Reda , Member of European Parliament (MEP) from the Pirate Party , and Max Andersson , MEP from the Green Party. . 58.000,00 € 07/01/2019.

Libraries 102
article thumbnail

CISA adds 15 new flaws to the Known Exploited Vulnerabilities Catalog

Security Affairs

According to Binding Operational Directive (BOD) 22-01: Reducing the Significant Risk of Known Exploited Vulnerabilities , FCEB agencies have to address the identified vulnerabilities by the due date to protect their networks against attacks exploiting the flaws in the catalog.

article thumbnail

CISA adds Ruckus bug and another six flaws to its Known Exploited Vulnerabilities catalog

Security Affairs

CVE-2016-3427 – Oracle Java SE and JRockit contains an unspecified vulnerability that allows remote attackers to affect confidentiality, integrity, and availability via vectors related to Java Management Extensions (JMX).

IT 95
article thumbnail

US CISA warns of a Samsung vulnerability under active exploitation

Security Affairs

CVE-2016-6415 – Cisco IOS, IOS XR, and IOS XE IKEv1 Information Disclosure Vulnerability. Cisco IOS contains an unspecified vulnerability that may block further telnet, reverse telnet, Remote Shell (RSH), Secure Shell (SSH), and in some cases, Hypertext Transport Protocol (HTTP) access to the Cisco device.

article thumbnail

Tracing the Supply Chain Attack on Android

Krebs on Security

com — were seen as early as 2016 as distribution points for the Hummer Trojan , a potent strain of Android malware often bundled with games that completely compromises the infected device. com 2016-02-18 ALIBABA CLOUD COMPUTING (BEIJING) CO., net 2014-01-20 ALIBABA CLOUD COMPUTING (BEIJING) CO., com , buydudu[.]com

Cloud 254